Apple's server designs may be at risk of exposure, because of a May 2026 cyberattack that targeted Foxconn.
AppleInsider can exclusively confirm that the Foxconn hack contained Apple server schematics. More damaging documents may come later.
On May 12, AppleInsider reported that ransomware group Nitrogen hacked into Foxconn facilities in North America. Initially, based on the available sample files, it appeared that the attackers didn't obtain any Apple documentation.
However, additional sample files have now been provided to AppleInsider, including more than 30 confidential Apple documents, all of which appear to be genuine. We've analyzed the newly available sample, and while we won't share any links, the files have all the hallmarks of genuine Apple documentation.
Nitrogen managed to obtain schematics detailing Apple server component designs from March 2026 and late 2025. Apple server rack specifications and manuals, from 2020 through 2023, were also stolen.
The server schematics were created using Siemens NX and are consistent with the format and style used by Apple. Dimensions for various brackets, components, and spacers are described in the documents, as is the chassis design of an internal Apple server.
Apple's Matterhorn project and other server details
Most significant among the files taken was an overview of Apple's Matterhorn project, detailing Apple server configurations that utilize Intel's Whitley and Eagle Stream platforms. The document covers the specifications of Apple servers, as well as their board layout and architecture.
Files related to Apple and Google servers were stolen from Foxconn.
Per the document, Apple's high-end servers used two 32-core Intel Ice Lake CPUs, more commonly known as 3rd Gen Intel Xeon Scalable processors, at 2.2GHz. They also featured 24 sticks of 128GB DDR4 RAM and Nvidia T4 GPUs, and multiple 8TB NVMe drives, among other things.
Nitrogen also acquired confidential Intel documents, detailing…